Related Articles

Why should I exclude Patch Managemer Plus folders from anti-virus scanning?

Patch Manager Plus server performs various taks from installing agents on the client computers, scanning computers, downloading and deploying the patches. The anti-virus that you have installed in your network would hinder the functioning of the Patch Manager Plus server and agent componenets. This could result in various failures during agent installation,  synchronizing the patch database (for PMP on-premise), scanning the computers, downloading the patches, deploying them. So, it is always recommended to exclude all the folders related to Patch Manager Plus on the server (only for PMP on-premise)/distribution server and agent computers. 

 

How do I exclude the folders from anti-virus scan?

You will have to exlcude the below listed files from anti-virus scan: 

The following files located under <installation drive >\Program Files\PatchManagerplus_Agent\bin directory:

  • cfgupdate.exe
  • dcagentregister.exe
  • dcagentservice.exe
  • dcagenttrayicon.exe
  • dcagentupgrader.exe
  • dcconfigexec.exe
  • dcmsghandler.exe
  • dcondemand.exe
  • dcpatchscan.exe
  • dcremcom.exe
  • dcstatusutil.exe
  • dctask64.exe
  • dcupload.exe
  • <installation drive >\Program Files\PatchManagerplus_Agent\rds\dc_rds.exe
  • <installation drive >\Program Files\PatchManagerplus_Agent\rds\FileTransfer\dcfiletransfer.exe
  • <installation drive >\Program Files\PatchManagerplus_Agent\dcconfig.exe
  • <installation directory><installation drive >\Program Files\PatchManagerplus_Agent\dcagent.dll

On the computer where Patch Manager Plus is installed, you should add notificationserver.exe to the exceptions list

The following .exe file names should be added to the exception list of anti-virus, for the Patch Manager Plus Distributional Server to be fully functional:

  • The following files located under <installation drive >\Program Files\\PatchManagerplus_DistributionServer\bin directory:
    • dcagentupgrader.exe
    • dcdsinstallwizard.exe
    • dcdsservice.exe
    • dcreplication.exe
    • dc_httpd.exe

Here is an sample document, to know more excluding folders from Symantec End Point, you can refer this for more details: How to add an exception to SEP?

Note: Excluding the specific .exe files is more complex because it keeps changing over a period of time. So folders can also be added to the exclusion list, so that the specified folders are not scanned. In such cases, ensure that you need to exclude the following folders respectively.

  • Agent computers - PatchManagerplus_Agent
  • Patch Manager Plus Server - PatchManagerplus_Server (Only for PMP On-premise)
  • Patch Manager Plus Distribution Server- PatchManagerplus_DistributionServer

To know more about the steps to exclude the folder from Scan click here.